Traffic Trace Info
DumpFile: 200311221400.dump
FileSize: 261.84MB
Id: 200311221400
StartTime: Sat Nov 22 14:00:00 2003
EndTime: Sat Nov 22 14:15:00 2003
TotalTime: 899.86 seconds
TotalCapSize: 200.87MB CapLen: 96 bytes
# of packets: 3995596 (1817.73MB)
AvgRate: 16.95Mbps stddev:1.28M
IP flow (unique src/dst pair) Information
# of flows: 1585238 (avg. 2.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
18.3% 3.8% 3.5% 3.3% 2.9% 2.6% 2.5% 2.3% 1.8% 1.2%
IP address Information
# of IPv4 addresses: 628501
Top 10 bandwidth usage (bytes/total in %):
18.3% 18.3% 8.3% 8.0% 6.5% 4.5% 3.8% 3.5% 3.4% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200311221400.pktlen.png)
detailed numbers
[ 16- 31]: 6229
[ 32- 63]: 879102
[ 64- 127]: 1729465
[ 128- 255]: 65768
[ 256- 511]: 108881
[ 512- 1023]: 153024
[ 1024- 2047]: 1053127
Protocol Breakdown
![[protocol breakdown chart]](200311221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3995596 (100.00%) 1906025669 (100.00%) 477.03
ip 3988516 ( 99.82%) 1905817376 ( 99.99%) 477.83
tcp 2415402 ( 60.45%) 1691402710 ( 88.74%) 700.26
http(s) 744720 ( 18.64%) 752391526 ( 39.47%) 1010.30
http(c) 298583 ( 7.47%) 27977697 ( 1.47%) 93.70
squid 12015 ( 0.30%) 6866390 ( 0.36%) 571.48
smtp 73485 ( 1.84%) 16506041 ( 0.87%) 224.62
nntp 231275 ( 5.79%) 348131836 ( 18.26%) 1505.27
ftp 208697 ( 5.22%) 198010103 ( 10.39%) 948.79
pop3 651 ( 0.02%) 373533 ( 0.02%) 573.78
imap 118 ( 0.00%) 58136 ( 0.00%) 492.68
telnet 137 ( 0.00%) 12933 ( 0.00%) 94.40
ssh 225 ( 0.01%) 16482 ( 0.00%) 73.25
dns 100 ( 0.00%) 9811 ( 0.00%) 98.11
bgp 162 ( 0.00%) 34770 ( 0.00%) 214.63
napster 2969 ( 0.07%) 1340867 ( 0.07%) 451.62
rtsp 6525 ( 0.16%) 483904 ( 0.03%) 74.16
icecast 653 ( 0.02%) 272579 ( 0.01%) 417.43
other 835002 ( 20.90%) 338912705 ( 17.78%) 405.88
udp 198560 ( 4.97%) 71069092 ( 3.73%) 357.92
dns 67104 ( 1.68%) 9197213 ( 0.48%) 137.06
realaud 1 ( 0.00%) 68 ( 0.00%) 68.00
everque 12 ( 0.00%) 832 ( 0.00%) 69.33
quake 1 ( 0.00%) 554 ( 0.00%) 554.00
other 130394 ( 3.26%) 60399209 ( 3.17%) 463.21
icmp 1366840 ( 34.21%) 142269815 ( 7.46%) 104.09
ip6 484 ( 0.01%) 102695 ( 0.01%) 212.18
other 7230 ( 0.18%) 973064 ( 0.05%) 134.59
frag 25183 ( 0.63%) 32602915 ( 1.71%) 1294.64
tcpdump file: 200311221400.dump.gz (105.69 MB)